When supplying ip in an IN filter, pad it so it works as expected.

Opmantek · Aug 5, 2022 · f3f534c · f3f534c
1 parent b5a5815
commit f3f534c
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/code_igniter/application/helpers/response_helper.php b/code_igniter/application/helpers/response_helper.php
@@ -873,6 +873,10 @@ function response_get_query_filter($query_string, $type = '')
                             // $value = str_replace('\"', '"', $value);
                             // $value = str_replace('"', '\"', $value);
                             $value = mysqli_real_escape_string($instance->db->conn_id, $value);
+                            if (($query->name === 'ip' or stripos($query->name, '.ip') !== false) and filter_var($value, FILTER_VALIDATE_IP)) {
+                                # We have an IP addresses - pad it
+                                $value = ip_address_to_db($value);
+                            }
                             $query->value .= '"' . $value . '",';
                         }
                         $query->value = trim($query->value, ',');